ovislink records
6 published records for vendor ovislink.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-310 Cryptographic Issues1
- CWE-400 Uncontrolled Resource Consumption1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
48Plan | CVE-2013-3686Proof of concept | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password viovislink · airlive wl2600cam · CWE-264 | Critical10.0 | 27.5%Oct 11, 2013 |
34Monitor | CVE-2013-3541Proof of concept | Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers toovislink · airlive wl2600cam · CWE-22 | High7.8 | 8.9%Oct 4, 2013 |
32Monitor | CVE-2013-3687Proof of concept | AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store senovislink · airlive od-2025hd · CWE-310 | High7.8 | 2.5%Oct 11, 2013 |
31Monitor | CVE-2013-3691Proof of concept | AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.ovislink · airlive poe2600hd firmware · CWE-400 | High7.5 | 3.9%Dec 11, 2019 |
30Monitor | CVE-2013-3539Proof of concept | Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC Dsony · snc ch140 · CWE-352 | Medium6.8 | 8.7%Oct 1, 2013 |
27Monitor | CVE-2013-3540Proof of concept | Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, Oovislink · airlive od-2025hd · CWE-352 | Medium6.8 | 0.9%Oct 4, 2013 |
- CVE-2013-368648Plan
cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password vi
CriticalCVSS 10.0Proof of conceptEPSS 27%ovislink · airlive wl2600camOct 11, 2013
- CVE-2013-354134Monitor
Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to
HighCVSS 7.8Proof of conceptEPSS 8%ovislink · airlive wl2600camOct 4, 2013
- CVE-2013-368732Monitor
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sen
HighCVSS 7.8Proof of conceptEPSS 2%ovislink · airlive od-2025hdOct 11, 2013
- CVE-2013-369131Monitor
AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.
HighCVSS 7.5Proof of conceptEPSS 3%ovislink · airlive poe2600hd firmwareDec 11, 2019
- CVE-2013-353930Monitor
Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC D
MediumCVSS 6.8Proof of conceptEPSS 8%sony · snc ch140Oct 1, 2013
- CVE-2013-354027Monitor
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, O
MediumCVSS 6.8Proof of conceptEPSS 0%ovislink · airlive od-2025hdOct 4, 2013